Updating individual libraries in Darwin?

Hi,


I was wondering how one would go about doing this rather than waiting for them to be updated in a maybe too-distant System update? I receive notifications of security updates to Unix libraries like http://www.debian.org/security/2016/dsa-3574 and, while this is primarily an update for Debian, the alert says it's for "Unix variants" - including OS X. I see this library exists under /usr/lib, so, is it possible to update it independently of OS X updates? Presumably, you'd have to obtain the updated source from, where - FreeBSD & then compile it? Does anyone ever do this? I've heard Apple can be a bit tardy in its application of Unix security updates so there could be a reason to do this for a particularly severe case applicable to one's environment.


T.I.A.


GAM

iMac, OS X El Capitan (10.11.4)

Posted on May 11, 2016 12:33 AM

Reply
8 replies

May 13, 2016 4:44 AM in response to Keith Barkley

Agree with Keith Barkley. There is no limb to go out on. It is simply taboo if you care about the normal operation of OS X. There is just too much inter-dependent stuff to start mucking with it.


The entire operating system, for the version that is released, goes through regression testing with the library versions that ship with it. Any application, or System process that expects explicit library functionality, or checks the library version, may explode if it finds something newer, or whose functionality has changed from what the code expects. Even a change in a library module that departs from a previous, expected data type can wreak havoc.

May 13, 2016 9:17 AM in response to gamcall64

libarchive is compiled on OS X with the same source code found at http://www.libarchive.org/ . Apple does change the configuration. You can find the xcode project file for your version of libarchive at http://opensource.apple.com//.Now, it is possible to apply the libarchive.org patches to the the source code found at opensource.apple then build the patched version but.... Well, you still have to overcome sip and the possibility that the finished product is not codesigned properly. Assuming that you got the patched version files installed and working, at anytime a software update could overwrite your changes.


If you need the updated library or want to use the updated bsdtar or bsdcpio, then download the patched source code and compile it in a prefix such as /usr/local or $HOME/local.

May 14, 2016 7:16 PM in response to gamcall64

Is there some type of forum limit for the number of helpful answers?

1 Answer

2 Helpful


Presumably there can be only one correct answer.

If you use the word "Correct" loosely 🙂

Whatever the person that started the thread chooses as Answered. But you would be surprised at the number of times they choose themselves, or accidentally click answered when the problem is not solved and they still need help, however, an answered question draws less viewers.

I tried to mark your answer as helpful but it wasn't having it.

That is perfectly OK.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Updating individual libraries in Darwin?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.